i'd rather use bind..i don't have to go outside the Centos tree that way
and can easily maintain it with yum update. Thanks for the suggestion
though.
Feizhou wrote:
>
>> If you only need caching, then try using something simpler, and more
>> secure, than bind. Try dnsmasq (it can run a dhcp-server too, but that
>> is easily disabled) or dns-cache (a djb software utility).
>
>
> dnscache - simple and secure
>
> However you need some supporting software, namely, daemontools
>
> see http://cr.yp.to/daemontools.html for more information.
>
> wget http://cr.yp.to/daemontools/daemontools-0.76.tar.gz
> tar zxf daemontools-0.76.tar.gz
> cd admin/daemontools-0.76
> echo 'gcc -Os -include /usr/include/errno.h -Wimplicit -Wunused
> -Wcomment -Wchar-subscripts -Wuninitialized -Wshadow -Wcast-qual
> -Wcast-align -Wwrite-strings' > src/conf-cc
> ./package/install
> cd ../..
>
> (The above will get you a running daemontools installation right away)
>
> djbdns -- see http://cr.yp.to/djbdns.html
>
> wget http://cr.yp.to/djbdns/djbdns-1.05.tar.gz
> tar zxf djbdns-1.0.5.tar.gz
> cd djbdns-1.05.tar.gz
> echo 'gcc -Os -include /usr/include/errno.h -Wimplicit -Wunused
> -Wcomment -Wchar-subscripts -Wuninitialized -Wshadow -Wcast-qual
> -Wcast-align -Wwrite-strings' > conf-cc
> make setup check
> dnscache-conf nobody nobody /var/dnscache 192.168.0.[?]
> touch /var/dnscache/root/ip/192.168.0
>
> (This will get you an installation that listens only on 192.168.0.[?]
> and that is installed under /var/dnscache. The dnscache program will run
> under nobody and log files will be generated under nobody uid/gid in
> /var/dnscache/log/main/current.
>
> By default, it will only use 1MB of RAM for caching. To increase, edit
> /var/dnscache/env/DATALIMIT and /var/dnscache/env/CACHESIZE.
> DATALIMIT must be slighty larger than CACHESIZE. At least two megabytes
> larger seems to be a good value.
> -- see http://cr.yp.to/djbdns/cachesize.html.
>
> Regarding last step, only queries from 192.168.0.x will be entertained.
> This is a non-forwarding setup)
>
> To activate: cd /service; ln -s /var/dnscache
>
> If you change anything under /var/dnscache/env or
> /var/dnscache/root/servers, you need to restart to take effect.
>
> To restart: svc -t /service/dnscache
> To stop: svc -d /service/dnscache
> To start: svc -u /service/dnscache (note: daemontools will automatically
> start on boot and it will also automatically start dnscache)
> _______________________________________________
> CentOS mailing list
> CentOS@xxxxxxxxxx
> http://lists.centos.org/mailman/listinfo/centos
> .
>
--
My "Foundation" verse:
Isa 54:17 No weapon that is formed against thee shall prosper; and
every tongue that shall rise against thee in judgment thou shalt
condemn. This is the heritage of the servants of the LORD, and their
righteousness is of me, saith the LORD.
-- carpe ductum -- "Grab the tape"
CDTT (Certified Duct Tape Technician)
Linux user #322099
Machines:
206822
256638
276825
http://counter.li.org/
